Lion Rock TechnologyIT Solutions · Hong Kong
Legal

Privacy policy

Last updated: 23 July 2026

Please note: this page is a general privacy policy provided for information only. It is not legal advice. It should be reviewed and adapted by a Hong Kong solicitor, and checked against how personal data is actually handled in practice, before it is relied on.

1. About this policy

Lion Rock Technology Limited (“Lion Rock Technology”, “we”, “us”, “our”) respects your privacy. This policy explains what personal data we collect through this website, why we collect it, who we share it with, and what rights you have. We handle personal data in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the “PDPO”).

This policy covers this website only. It does not cover data you give us under a signed client agreement, which is governed by that agreement, and it does not cover our products, which have their own policies.

2. What personal data we collect

This website has two forms: a general inquiry form and a quotation request form. Through them we collect the following.

  • Your name.
  • Your email address.
  • Your phone number.
  • Your company or organisation name.
  • The project details you choose to give us — the type of work, budget range, timeline, requirements and anything else you write in the message field.

Our web server also records basic technical data automatically, such as the IP address of the visitor, browser and device type, the pages requested and the time of the request. This is ordinary server logging used to keep the site running and secure.

We do not ask for identity card numbers, payment card details or any sensitive personal data through this website. Please do not send them to us in a form or an email. Share only the project details you are comfortable sharing at this stage.

3. How we collect it

We collect personal data directly from you when you complete a form on this site, send us an email or call us. Our hosting and email providers pass the message to us as part of delivering it. Server log data is collected automatically when your browser requests a page.

Giving us your data is voluntary. However, if you do not give us your contact details and enough information about your project, we cannot reply to your enquiry or prepare a quotation.

4. Why we use your data

We use the personal data collected through this website for these purposes.

  • To reply to your enquiry and answer your questions.
  • To assess your requirements and prepare, discuss and issue a quotation or statement of work.
  • To deliver and support the services you engage us for.
  • To keep proper business and accounting records.
  • To operate, secure, monitor and troubleshoot this website.
  • To meet our legal, regulatory and tax obligations in Hong Kong.

We will not use your personal data for a new purpose that is unrelated to those above without telling you and, where the PDPO requires it, obtaining your consent.

5. Our commitments under the six Data Protection Principles

The PDPO sets out six Data Protection Principles. These are the commitments we make under each of them.

  • DPP1 — Purpose and manner of collection. We collect only the data we actually need, for a lawful purpose directly related to our business, by lawful and fair means, and we tell you what we are collecting and why.
  • DPP2 — Accuracy and retention. We take practicable steps to keep personal data accurate and up to date, and we do not keep it longer than is necessary for the purpose it was collected for.
  • DPP3 — Use of personal data. We use personal data only for the purpose it was collected for, or a directly related purpose, unless you give your consent to something else.
  • DPP4 — Security. We take practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss or use.
  • DPP5 — Openness. We are open about the kinds of personal data we hold and what we do with them. This policy is part of that commitment.
  • DPP6 — Access and correction. You may ask us whether we hold personal data about you, ask for a copy, and ask us to correct it. Section 10 below explains how.

6. Who we share your data with

We do not sell your personal data. We do not rent or trade it, and we do not pass it to third parties for their own marketing.

We share personal data only where it is necessary, and only with the following.

  • Service providers who operate the infrastructure behind this site — website hosting, email delivery and similar technical services — acting on our instructions.
  • Subcontractors and professional advisers who need the data to deliver an engagement you have asked for, under confidentiality obligations.
  • Government departments, regulators, courts or law enforcement agencies, where we are required or permitted by law to disclose.

Some providers may store or process data on servers outside Hong Kong. Where that happens, we choose reputable providers and require them to protect the data and to use it only for the service they provide to us.

7. Direct marketing

Under the PDPO, a company must obtain your consent before using your personal data in direct marketing, must tell you clearly what kinds of data it intends to use and what it will market, and must give you a way to refuse without charge.

We do not use data submitted through this website for direct marketing without your opt-in consent. If we ever want to send you marketing material, we will ask you first and explain exactly what we would send. You may withdraw your consent at any time, free of charge, by emailing us.

Replies to your own enquiry, quotations, and messages about a project you have engaged us for are not direct marketing.

8. How long we keep your data

We keep personal data only as long as it is needed for the purpose it was collected for, plus any period we are required to keep records by law.

  • Enquiries and quotation requests that do not lead to an engagement: kept for [Company to insert], then deleted.
  • Client records and project correspondence: kept for the life of the engagement, and afterwards for the period required by Hong Kong record-keeping and tax rules.
  • Server logs: kept for a short operational period, then overwritten or deleted.

You may ask us to delete your enquiry earlier. We will do so unless we are required to keep it.

9. How we protect your data

We take practicable steps to keep personal data secure. These include limiting access to staff who need the data to do their work, serving this website over an encrypted connection (HTTPS), keeping software and dependencies updated, and requiring confidentiality from our staff and subcontractors.

We make no absolute promise here. No system connected to the internet is completely secure. If a data breach happens that is likely to cause harm, we will act to contain it, notify the people affected where appropriate, and consider notifying the Privacy Commissioner for Personal Data.

10. Your right to access and correct your data

Data access request — section 18 of the PDPO. You have the right to ask whether we hold personal data about you and to be supplied with a copy of that data.

Data correction request — section 22 of the PDPO. If you believe personal data we hold about you is inaccurate, you have the right to ask us to correct it.

Section 6 of the PDPO sets out the general framework for these rights, including the limited grounds on which a data user may refuse a request. If we refuse a request, we will tell you in writing and give our reasons.

To make a request, email jason@lionrocktechnology.com.hk with “Data Access Request” or “Data Correction Request” in the subject line, and describe the data you are asking about. We may need to verify your identity before we act.

We will respond within 40 days, as the PDPO requires. If we cannot comply within that time, we will tell you in writing and explain why.

The PDPO allows a data user to charge a fee for complying with a data access request. Any fee we charge will not be excessive and will reflect the direct costs of locating and copying the data. We will tell you the amount before we proceed, so you can decide whether to continue. We do not charge a fee for a data correction request.

11. Cookies and analytics

This is a static marketing website. It has no login and creates no user account.

[Company to confirm] — as at the date of this policy, we do not place tracking or advertising cookies on your device through this site, and we do not run third-party analytics on it. If we add analytics or cookies in future, we will update this policy and, where required, ask for your consent first.

Your browser may store a small preference on your own device — for example whether you are reading the English or the Chinese version of this site. That preference stays on your device. It is not sent to us and is not used to identify you.

If our hosting provider sets strictly necessary cookies for security or load balancing, those are used to deliver the site and not to build a profile of you.

12. Our own products

CleverKeeper and GymRock are separate products with their own privacy policies. Those policies, not this one, describe what data each product collects and how it is used. Please read the policy published with the product itself. This policy covers only this website.

13. Links to other websites

This site links to third-party websites and app stores. We do not control them and we are not responsible for their content or for how they handle personal data. When you leave this site, read the privacy policy of the site you arrive at.

14. Children’s data

This website is aimed at businesses and organisations, not at children. We do not knowingly collect personal data from children through it. If you believe a child has submitted personal data to us through this site, please email us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. The version published on this page is the current one and applies from the date shown at the top. Where a change is significant, we will make that clear on the page.

16. Contact us and how to complain

For any privacy question, or to make a data access or correction request, contact us at jason@lionrocktechnology.com.hk or on +852 4626 5002. Written correspondence should be addressed to Lion Rock Technology Limited and sent to the email address above.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (the PCPD), which supervises compliance with the PDPO. Details of how to lodge a complaint are published on the PCPD website.